Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/0B596550435711EFB05D5BB2762E951A.roa
File: 0B596550435711EFB05D5BB2762E951A.roa (raw, json)
Hash identifier: VwRO3IvZftF2ojP/Pc3Brwc6l55F3GQu/2LXLrsj73Y=
Subject key identifier: BA:32:A0:87:85:7D:AE:67:04:3F:F5:41:CB:B1:3F:EA:FF:14:12:F1
Certificate issuer: /CN=F368F4A1AR/serialNumber=825DB034FAB437A89A8DD24406AB7282C78B62BA
Certificate serial: 0B
Authority key identifier: 82:5D:B0:34:FA:B4:37:A8:9A:8D:D2:44:06:AB:72:82:C7:8B:62:BA
Authority info access: rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/0B596550435711EFB05D5BB2762E951A.roa
Signing time: Tue 16 Jul 2024 09:37:40 +0000
ROA not before: Tue 16 Jul 2024 09:37:37 +0000
ROA not after: Wed 31 Jul 2024 09:37:37 +0000
asID: 49902
IP address blocks: 168.253.128.0/18 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F4A1AR/serialNumber=825DB034FAB437A89A8DD24406AB7282C78B62BA
Validity
Not Before: Jul 16 09:37:37 2024 GMT
Not After : Jul 31 09:37:37 2024 GMT
Subject: CN=66963f64-73a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:6a:09:ee:5f:d6:b6:71:e6:27:da:60:9b:
77:3d:ce:7f:1b:f8:25:9a:cb:0e:fc:58:b0:42:04:
cc:ef:68:a9:58:3c:f2:f8:9f:8b:bd:a8:f1:46:f7:
2f:0b:99:38:08:c2:3c:d5:8a:eb:d0:6a:82:29:a5:
21:bd:bc:88:35:76:9d:ae:10:21:de:d8:eb:7e:ba:
56:0c:f7:a3:e4:51:db:b7:0b:36:b9:25:39:de:46:
52:3c:f8:a5:2a:dc:83:3b:9c:dc:1f:da:c4:16:7d:
58:32:32:6a:4f:ac:3c:cb:2b:fe:20:c0:62:db:c8:
47:7a:25:4e:0a:13:62:fd:c9:bb:17:33:84:61:d6:
7b:22:b7:5a:06:6a:f2:31:cf:3d:a8:61:f0:79:2e:
b9:6d:2c:a1:f9:b0:18:bd:92:5b:99:88:3b:84:73:
37:04:5a:46:e7:af:4f:42:e6:29:60:cd:00:19:c9:
4b:97:17:0e:15:fa:6f:b7:11:2f:19:06:aa:48:d6:
d5:dd:e7:54:76:af:78:d8:b9:09:80:b9:c1:23:d5:
b8:e8:b3:b8:a1:f6:29:f4:2d:36:38:5d:86:79:8f:
93:4e:d4:2c:e6:9d:f0:2d:7b:0c:0b:30:14:ec:f7:
f6:5f:03:53:74:9e:76:9c:5a:2f:2a:39:ff:f0:b0:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:A0:87:85:7D:AE:67:04:3F:F5:41:CB:B1:3F:EA:FF:14:12:F1
X509v3 Authority Key Identifier:
keyid:82:5D:B0:34:FA:B4:37:A8:9A:8D:D2:44:06:AB:72:82:C7:8B:62:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/0B596550435711EFB05D5BB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.253.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:72:0c:20:77:6d:45:e8:24:29:3c:57:75:83:0d:45:8e:61:
86:f9:6f:46:a0:e2:8f:7e:a3:da:b5:ba:f6:7b:ba:87:c8:7a:
1c:14:b4:d5:76:52:e6:c2:24:ea:f9:cc:ae:4d:e5:bc:ff:f3:
51:ca:49:27:01:8b:01:73:c9:54:a4:fd:9e:0b:ed:5b:04:d1:
ab:20:b7:aa:c9:fa:55:07:b8:7a:59:8a:b5:fc:4f:30:6d:86:
1d:ea:25:6b:92:2c:42:b3:3f:99:7f:78:b0:b5:69:54:e2:8c:
c7:b7:49:70:2e:e7:24:8d:47:b0:6a:24:fa:d4:0e:46:ee:f2:
da:88:ae:b2:e8:f0:08:19:2f:37:40:53:93:e9:d0:1b:14:85:
0f:7e:97:21:ee:b7:a3:9c:3f:bc:e9:36:57:ed:ce:fd:8e:54:
0e:93:89:f4:4c:03:05:94:ae:a7:a0:93:ad:97:ef:ad:89:80:
75:d8:0f:24:e8:9f:75:f8:d7:a4:eb:21:f4:c9:4b:39:d3:13:
a2:71:08:08:e6:cd:2c:e6:43:cf:10:1c:75:49:bb:48:d1:04:
0a:9d:e7:5d:ad:7c:ca:09:40:ed:22:27:a6:e2:50:b6:03:f6:
f6:1f:18:ec:47:e6:6e:85:38:bb:99:eb:ee:0e:b3:8a:50:c0:
d5:d9:08:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 05:35:31 2024 by rpki-client on console-fra.rpki-client.org